$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/e67bfd16-b8e0-3e32-ac6b-19ca653a7841.roa File: e67bfd16-b8e0-3e32-ac6b-19ca653a7841.roa (raw, json) Hash identifier: q2x88S/uvSEQbCuAdQJuYAUJR8KcESmRPLsGiggUKKs= Subject key identifier: 48:43:D4:1C:EC:C0:B6:DF:2E:B9:46:8A:74:0D:25:0F:F5:EA:4C:AD Certificate issuer: /CN=998a132f-4994-4d96-a767-25e4ce264bc4 Certificate serial: 010D0C9F4328584BB5C24E6849915F3567FC4320 Authority key identifier: 58:61:99:D7:A0:9B:63:D6:A3:67:92:0C:03:B4:B8:28:F1:D6:2C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/e67bfd16-b8e0-3e32-ac6b-19ca653a7841.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 19520 IP address blocks: 2602:fb4e::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/998a132f-4994-4d96-a767-25e4ce264bc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/998a132f-4994-4d96-a767-25e4ce264bc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:4e:68:49:91:5f:35:67:fc:43:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=998a132f-4994-4d96-a767-25e4ce264bc4 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=d4e8d9de-fb35-49af-a08c-5909f69b510f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:aa:c0:1e:74:76:87:96:c9:c2:0c:d2:51:4b: d1:e6:e2:18:d2:b6:d9:e6:e9:99:18:56:1e:52:51: f9:12:72:56:2e:40:08:71:ea:6f:67:8e:7c:4b:b3: 63:da:56:57:1e:34:22:9a:b5:32:eb:82:a1:a1:8d: 39:36:94:6c:00:82:90:6c:ad:74:89:d0:09:10:2f: 33:24:c1:f2:c6:54:7a:eb:e5:f4:32:1f:1d:4f:33: ac:3d:48:9a:9d:94:19:09:c2:88:5e:ec:bc:04:3c: 91:7d:17:c2:f4:57:27:d0:b0:15:63:04:64:3b:66: fe:2b:7f:c3:98:81:91:d3:66:f8:51:2b:a2:53:9a: 29:08:69:1c:a5:2d:7b:fb:c6:25:4a:bc:cd:1e:5e: 97:cc:ef:8c:9f:47:f2:ee:36:fe:71:fe:32:c8:86: f2:85:2e:7e:6b:10:16:44:15:08:15:2d:e3:f5:66: 45:1c:90:9f:c7:d8:97:99:83:27:91:c9:d7:89:6a: 0c:db:ee:db:f0:b0:70:f5:d2:fb:dc:b3:7d:e1:48: 4c:90:02:dd:56:9d:4c:5b:50:59:21:36:89:18:cb: 87:da:bb:cb:6c:5f:2b:38:73:d6:d9:48:7d:8f:e6: e4:71:55:25:02:1d:e0:2a:6d:a2:4c:e0:d8:a3:a8: d7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:43:D4:1C:EC:C0:B6:DF:2E:B9:46:8A:74:0D:25:0F:F5:EA:4C:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/e67bfd16-b8e0-3e32-ac6b-19ca653a7841.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/998a132f-4994-4d96-a767-25e4ce264bc4.crl X509v3 Authority Key Identifier: keyid:58:61:99:D7:A0:9B:63:D6:A3:67:92:0C:03:B4:B8:28:F1:D6:2C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb4e::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:7e:c9:40:9c:6e:f9:5f:8b:cc:4d:a9:db:03:5a:b9:92:f0: ad:a2:4f:73:f1:2b:9a:01:48:13:4d:49:2d:b0:c9:7c:64:26: 62:98:85:be:74:98:63:c0:9f:3a:f9:22:22:0b:5a:3d:55:be: 6a:e3:5b:43:2f:50:d5:ab:d9:a0:4b:c8:dc:89:58:5a:12:b1: a5:bb:88:86:96:9f:72:7b:95:5b:1a:2a:ae:65:6c:c6:96:e0: 7e:17:cd:6c:61:b5:73:52:b6:71:9a:b3:2f:5f:40:19:23:fa: b5:3e:14:dc:52:46:19:b5:81:e6:90:56:4b:46:16:56:0d:1e: 60:8f:4a:95:48:ec:5d:51:55:25:0b:52:51:36:3a:5d:5e:a2: 64:f2:72:19:61:62:97:b2:32:5a:e1:b5:c4:be:22:74:26:5a: cc:22:3a:7c:55:df:91:22:a7:8e:a3:b4:0a:e0:64:e3:86:61: 5e:c7:90:df:b1:33:3b:5c:ca:b7:7e:9f:13:32:4e:97:92:3f: 37:87:94:c3:e6:25:8c:8c:69:76:20:2a:f6:c4:ca:48:96:33: 7e:80:e4:a5:b0:82:ad:b0:55:7b:7f:f6:91:61:4c:7d:3d:00: 60:f5:92:96:9f:9b:73:4d:da:9c:c0:f4:52:83:cb:9c:a2:f7: 63:7b:7f:62 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEu1wk5oSZFfNWf8QyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk4YTEzMmYtNDk5NC00ZDk2LWE3NjctMjVlNGNlMjY0 YmM0MB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk ZDRlOGQ5ZGUtZmIzNS00OWFmLWEwOGMtNTkwOWY2OWI1MTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqrAHnR2h5bJwgzSUUvR5uIY0rbZ5umZGFYe UlH5EnJWLkAIcepvZ458S7Nj2lZXHjQimrUy64KhoY05NpRsAIKQbK10idAJEC8z JMHyxlR66+X0Mh8dTzOsPUianZQZCcKIXuy8BDyRfRfC9Fcn0LAVYwRkO2b+K3/D mIGR02b4USuiU5opCGkcpS17+8YlSrzNHl6XzO+Mn0fy7jb+cf4yyIbyhS5+axAW RBUIFS3j9WZFHJCfx9iXmYMnkcnXiWoM2+7b8LBw9dL73LN94UhMkALdVp1MW1BZ ITaJGMuH2rvLbF8rOHPW2Uh9j+bkcVUlAh3gKm2iTODYo6jXqQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEhD1BzswLbfLrlGinQNJQ/16kytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85OThh MTMyZi00OTk0LTRkOTYtYTc2Ny0yNWU0Y2UyNjRiYzQvZTY3YmZkMTYtYjhlMC0z ZTMyLWFjNmItMTljYTY1M2E3ODQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTk4YTEzMmYtNDk5NC00ZDk2LWE3 NjctMjVlNGNlMjY0YmM0Lzk5OGExMzJmLTQ5OTQtNGQ5Ni1hNzY3LTI1ZTRjZTI2 NGJjNC5jcmwwHwYDVR0jBBgwFoAUWGGZ16CbY9ajZ5IMA7S4KPHWLLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85OThhMTMyZi00OTk0LTRkOTYtYTc2Ny0yNWU0 Y2UyNjRiYzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL7TgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAL37JQJxu+V+LzE2p2wNauZLwraJPc/ErmgFIE01JLbDJfGQmYpiF vnSYY8CfOvkiIgtaPVW+auNbQy9Q1avZoEvI3IlYWhKxpbuIhpafcnuVWxoqrmVs xpbgfhfNbGG1c1K2cZqzL19AGSP6tT4U3FJGGbWB5pBWS0YWVg0eYI9KlUjsXVFV JQtSUTY6XV6iZPJyGWFil7IyWuG1xL4idCZazCI6fFXfkSKnjqO0CuBk44ZhXseQ 37EzO1zKt36fEzJOl5I/N4eUw+YljIxpdiAq9sTKSJYzfoDkpbCCrbBVe3/2kWFM fT0AYPWSlp+bc03anMD0UoPLnKL3Y3t/Yg== -----END CERTIFICATE-----Generated at Wed Nov 5 18:04:39 2025 by rpki-client